This package authenticates to npm via OIDC trusted publishing (no token
secret), which requires npm >= 11.5.1. Node 22 bundles npm 10.x, where the
OIDC exchange doesn't run — npm falls back to an empty NODE_AUTH_TOKEN and
the publish PUT returns E404 (worked previously only because the job ran on
Node 24 / npm 11). Add `npm install -g npm@latest` before publish.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>